Jira Service Desk Separation

We've recently started using Service Desk and it seems ideal to create a simplified portal for customer issue entry and updates. However, we have been unable to find any documentation or configuration to "isolate" the client from the standard Jira system.

Upon creating a test user and visiting the portal URL to login to Jira as the customer, I get access to most Jira areas (issues, search, etc.). We'd like the client to ONLY see the service desk customer portal.

I've reviewed the permissions, groups, roles and permission schemes to no avail. Can anyone confirm if what we want is possible under Service Desk?

5 answers

All users licensed to access Service Desk are by definition licensed to use JIRA. After all, it's really just a plugin for JIRA. To isolate the Service Desk users from the JIRA projects, you will have to configure your projects in such a way that these users don't have access to view isssues. All other areas such as search filters and JIRA Agile are based on these permissions, so if the user doesn't have access to the project then the issues won't show up in their search.

Here's the catch with this, though. The user will need to have some access to the project the service desk portal is connected to in order to fill out a request form. Here's how I plan to handle this:

Create a new role called "Service Desk Users"

Put "jira-users" group in the role to let all logged in users into it

Copy the permission scheme for the project, rename it and associate it with the project

Edit permissions on new scheme and give the Service desk user the following roles:

Create Issues

Create Attatchments

The previous permissions will let them create issues and attatchments, but nothing else. The Browse Projects permission is what will give them access to see their currently open issues. If this is turned off, they will see a zero in the counter and they won't be able to comment on the issues via the email link. If you want to let them see their issues and comment, give them these extra permissions:

Browse Projects

Add Comments

Edit Own Comments

Delete Own Comments

Once these permissions are given, the users will be able to see issues in the service desk project. Of course, they won't know what JIRA is, nor will they care to go find it. Just in case they stumble into the site, though, you will need to be diligent about what you say in your issues because the users will be able read it. If you have a confidential comment, you will need to secure it appropriately. You will also probably want to use issue level security to only let them see their own issues.

The bottom line is, lock them out of every other project they don't need to access and then give them only as much access as they need in the Service Desk-related project.

P.S. Also keep in mind that the project used by the service desk is only for receiving, triaging and resolving incidents for the end users. If you want to, you could create additional issues in a private project that they don't have access to and then link back to the original issue. We may do that with some of our workgroups.

Also, as another way to try and keep users where I want them, I added the following script to the Announcement banner for public (System/ g + g + Announcement) so that it will change the normal default page from the daskboard login to my page.

We want to have multiple clients accessing the service desk module, with the ability to see just their own issues via the portal.

However, it does not seem possible to configure Jira/Service Desk in such a way that clients can not log into Jira directly and see ALL issues relating to ALL clients, since the "Browse Project" permission that they need to access the service desk.

This seems to be a huge limitation, and would present a commercial risk unaccepatable to our clients. We could create one project per client, but then we would have to have separate eervice desks for each, since each service desk can only sit on a single project.

Am I missing something here?

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

It might be possible with a plugin. I could try to write one later if needed. Well, that is if your OK with using it. However, I will note that this is something that should be added to JIRA Service Desk itself.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.